AuthListener now uses the correct key in the header for HTTP Authentication